ThreatQ Supported
SentinelOne CDF
SentinelOne is a cloud EDR product. Agents are deployed to computers/endpoints, monitoring and reporting back any malicious activity to the SentinelOne dashboard. The ThreatQ integration for SentinelOne allows the ingestion of various reports and detections from SentinelOne.
Version
1.1.0Categories
Network Management,Threat Prevention
ThreatQ Keyword Alerts Connector
The ThreatQ Keyword Alerts Connector for ThreatQuotient enables users to be alerted via email when a set of keywords are matched on incoming threat intelligence. Users can be alerted on new and updated objects such as adversaries, malware, and reports, that reference a keyword.
